ATTENTION: wait for cryptsetup-mkinitrd before checkin, otherwise installation
with root on crypto no longer boot

- version 1.5.1:
  * Added keyslot checker
  * Add crypt_keyslot_area() API call.
  * Optimize seek to keyfile-offset (Issue #135, thx to dreisner).
  * Fix luksHeaderBackup for very old v1.0 unaligned LUKS headers.
  * Allocate loop device late (only when real block device needed).
  * Rework underlying device/file access functions.
  * Create hash image if doesn't exist in veritysetup format.
  * Provide better error message if running as non-root user (device-mapper, loop).
- split off hashalot and boot.crypto
- move to /usr

• Files Changed
• Browse Source

Verify GPG signature: Perform build-time offline GPG verification.
Please verify that included keyring matches your needs.
For manipulation with the offline keyring, please use gpg-offline tool from openSUSE:Factory, devel-tools-building or Base:System.
See the man page and/or /usr/share/doc/packages/gpg-offline/PACKAGING.HOWTO.

If you need to build your package for older products and don't want to mess spec file with ifs, please follow PACKAGING.HOWTO:
you can link or aggregate gpg-offline from
devel:tools:building or use following trick with "osc meta prjconf":

--- Cut here ----
%if 0%{?suse_version} <= 1220
Substitute: gpg-offline
%endif

Macros:
%gpg_verify(dnf) \
%if 0%{?suse_version} > 1220\
echo "WARNING: Using %%gpg_verify macro from prjconf, not from gpg-offline package."\
gpg-offline --directory="%{-d:%{-d*}}%{!-d:%{_sourcedir}}" --package="%{-n:%{-n*}}%{!-n:%{name}}""%{-f: %{-f*}}" --verify %{**}\
%else\
echo "WARNING: Dummy prjconf macro. gpg-offline is not available, skipping %{**} GPG signature verification!"\
%endif\
%nil
-----------------

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

osc copypac from project:home:fcrozat:branches:security package:cryptsetup revision:2

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

add reencrypt

• Files Changed
• Browse Source

- version 1.5.0:
  * Add --device-size option for reencryption tool.
  * Switch to use unit suffix for --reduce-device-size option.
  * Remove open device debugging feature (no longer needed).
  * Introduce cryptsetup-reencrypt - experimental offline LUKS reencryption tool.
  * Fix luks-header-from-active script (do not use LUKS header on-disk, add UUID).
  * Add --test-passphrase option for luksOpen (check passphrase only).
  * Introduce veritysetup for dm-verity target management.
  * Both data and header device can now be a file.
  * Loop is automatically allocated in crypt_set_data_device().
  * Require only up to last keyslot area for header device (ignore data offset).
  * Fix header backup and restore to work on files with large data offset.
  * Fix readonly activation if underlying device is readonly (1.4.0).
  * Fix keyslot removal (wipe keyslot) for device with 4k hw block (1.4.0).
  * Allow empty cipher (cipher_null) for testing.
  * Fix loop mapping on readonly file.
  * Relax --shared test, allow mapping even for overlapping segments.
  * Support shared flag for LUKS devices (dangerous).
  * Switch on retry on device remove for libdevmapper.
  * Allow "private" activation (skip some udev global rules) flag.

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

  cryptsetup developers use a special exception to link against openSSL

• Files Changed
• Browse Source

license update: SUSE-GPL-2.0-with-openssl-exception and LGPL-2.0+
cryÃptsetup developers use a special exception to link against openSSL

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- boot.crypto:
  * update man page to mention systemd and wiki article
  * sanitize dm target names (bnc#716240)

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- boot.crypto:
  * prefer physdev from crypttab
  * fix non-plymouth use

• Files Changed
• Browse Source

- new version 1.4.2
  * Fix header check to support old (cryptsetup 1.0.0) header alignment. (1.4.0)
  * Add --keyfile-offset and --new-keyfile-offset parameters to API and CLI.
  * Add repair command and crypt_repair() for known LUKS metadata problems repair.
  * Allow to specify --align-payload only for luksFormat.
  * Unify password verification option.
  * Support password verification with quiet flag if possible. (1.2.0)
  * Fix retry if entered passphrases (with verify option) do not match.
  * Support UUID=<LUKS_UUID> format for device specification.
  * Add --master-key-file option to luksOpen (open using volume key).
  * Fix use of empty keyfile.
  * Fix error message for luksClose and detached LUKS header.
  * Allow --header for status command to get full info with detached header.

• Files Changed
• Browse Source

- boot.crypto:
  * avoid warning about module 'kernel' (bnc#741468)
  * incorporate plymouth support

• Files Changed
• Browse Source

osc copypac from project:security package:cryptsetup revision:79

• Files Changed
• Browse Source

usrMerge project - move files from toplevel to /usr

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

Update to new upstream release 1.4.1; trim support, amongst it

• Files Changed
• Browse Source